Topic: Is there smtp connection limit per ip address?

[cozmos9]

Before I go to bugzilla with this one, I thought I'd check here first.

I have an sme6.01 that is smtp only.  Local domain emails, it passes to an sme7pre3 server which serves pop & imap clients.  I continually have queued up emails in sme6.01 whose qmail log reads:

2006-03-10 09:46:47.843806500 delivery 5637: deferral: Connected_to_10.21.2.16_but_greeting_failed./Remote_host_said:_451_Sorry,_too_many_connections_from_10.21.2.15,_try_again_later/

It seems 7pre3 is setting connection limits possibly as a spam deterrant.  Of course, I want this behavior only on a gateway server, not on an internal server.

Anyone have and ideas?  Is it a simple adjustment in assp?  I did change qmail's concurrency to 30 each on sme7 server which did not help.

Thanks,
Jean

[cozmos9]

So far, I've found the following in /etc/mail/spamassassin/local.cf.

internal_networks 10.21.2.16
trusted_networks 127.

I am not sure why only the server address shows as the internal network as opposed to the whole subnet and/or any of the entries in the local network page.  I could not find the throttle control anywhere.  Any suggestions?  Maybe clam conf is where the concurrency limit is set?

Thanks,
Jean

[JonB]

Check out

/etc/e-smith/templates/var/service/qpsmtpd/runenv/INSTANCES_PER_IP

It is set to 5

You could create a custom template

/etc/e-smith/templates-cutom/var/service/qpsmtpd/runenv/INSTANCES_PER_IP

and up the limit.

While this is not strictly a bug and is working as it is supposed to you may want to raise a bug as this will affect any SME7 that is a delegated mail server behind another mail server.

Jon

[cozmos9]

Thanks for the post, Jon.  Yeah, I saw that too after some digging around.  But, I was too chicken to mess with it.  I think you may be right about posting it as a bug.  A server-manager email page might be a good place to add this control.

Jean

[JonB]

I would disagree with a server manager panel for this.

However I think it should be a database entry e.g

config setprop qpsmtpd IPinstances xx

and have the template fragment INSTANCES_PER_IP use this value

Jon

[cozmos9]

You're probably right on that too.  However, a panel control would be much more visible for a newbie like me